Articles in this section

See more

SSO and Connect: Adding Connect to Azure AD

Avatar
Jay
  • Updated

Note: In these steps, we recommend using a temporary document to make note of several security strings you will need to complete your setup. However you choose to do this, be sure to keep your document or note secure, and delete or destroy it if necessary when you are finished.

  1. Sign in to the Azure portal: https://portal.azure.com/

  2. Under Azure services, click App registrations.

    If App registrations is not visible, click More services and use the Search field, or scroll down to the Other group.
  3. Click New registration at the top left of the window.
  4. Enter Extensis Connect for the Name of the app.
    You can have multiple versions of the same app, just use different names (such as Extensis Connect - Marketing).
  5. Under Supported account types, select Accounts in this organizational directory only (tenant_name only - Single tenant).
  6. Under Redirect URI, choose Web from the Select a platform menu, then enter https://auth.extensis.com/oauth2/v1/authorize/callback in the path field.
    Although the Azure page says this is optional, Extensis Connect requires this information.
  7. Click Register at the bottom left of the window.
    After a few seconds the screen changes to your app registration details.
  8. Click Certificates & secrets in the pane on the left.
  9. Click New client secret near the center of the screen (above the empty list).
  10. Enter a description for the secret.
  11. Use the Expires pop-up menu to choose when the secret will expire.
    Note: To continue using the application, you will need to renew the secret before it expires.
  12. Click Add at the bottom left of the client secret pane.
  13. Click the Copy icon next to the secret Value to copy it, then paste it to a temporary document.
    If you don’t copy it at this point, it will be hidden and you will need to re-create it.
  14. Click Overview (at the top of the left panel).
  15. Copy the Application (client) ID and Directory (tenant) ID to a temporary document.

Restricting access to specific users or groups

The following steps are optional. Complete them if you would like to restrict access to the Extensis Connect app to a subset of your users or groups.

  1. Choose Home from the "hamburger" menu at the top left of the window.
  2. Under Azure services, click Azure Active Directory.
    (If Azure Active Directory is not visible, click More services.)
  3. Click Enterprise applications (in the left pane).
  4. Click the Extensis Connect app from the list (look for the app name that you entered in step 4 above).
  5. Click Properties (in the left pane).
  6. Toggle Assignment required to Yes.
  7. Click Save near the top of the window.
  8. Click Users and groups (in the left pane).
    (Your Azure license may only allow assigning users.)
  9. Click Add user/group at the top of the window.
  10. In the Add Assignment window, click None Selected under Users and groups at the left
  11. Click any users or groups that you want to assign to your application, then click Select at the bottom left of the Users and groups pane.
  12. Click Assign in the Add Assignment window.

Receiving “Need Admin Approval” Error When Logging into Connect with AAD Credentials

  1. Select Extensis Connect within your App Registrations service
  2. Click on API Permissions
  3. Look for “Grant admin consent for…” above the list of Permission names and select it, and then select “Yes” to confirm the change
    mceclip0.png

That’s it! The next step is to configure Azure within Extensis Connect.

Related articles